Information on Data Processing and Protection (selection process candidates)

Where do the personal data we process come from?  

The data that the Data Controller processes as a result of the interactions carried out by the candidate through our website or the process come from the following sources:  

• Data provided directly by the data subject by filling in the spaces provided by the Data Controller to manage the selection and registration process, or by sending e-mails or by any other means by which the candidate communicates with the Data Controller.  

• Data obtained as a result of the implementation, processing and maintenance of the relationship established between the candidate and the Data Controller throughout the selection process.   

• Residually, data obtained from other CEU entities or companies related to human resources management, such as employment websites or LinkedIn.   

Who are the recipients of your personal data?  

We may share your data with certain third parties depending on the purposes and the legal grounds:   

• As long as the data are necessary for the fulfilment of the purposes for which they were collected or for the duration of the legal relationship and while required for dealing with any liabilities arising from that relationship;  

• Legal obligation of retention, in particular taking into account the regulations on education;   

• Request for deletion by the data subject, where appropriate.   

• Specifically, we will retain records of applicants for a period of four (4) years from the last update of their data or documents to ensure that they are fully up to date. At the end of this period, the account and data will be blocked and subsequently deleted.   

• Once the data is no longer necessary to fulfil the aforementioned purposes, the Data Controller will proceed to block your data in order, if necessary, to make it available to the courts, the Public Prosecutor's Office or the competent Public Authorities, in particular the data protection authorities, for the purpose of claiming possible liabilities arising from the processing, and only for the period of the statute of limitations for such liabilities. Once this period has elapsed, the Data Controller will proceed to destroy the data.   

• You can request further information on the retention periods by contacting us at [email protected].  

 What are your rights?  

The Data Controller informs you that you have the following rights over your personal data:  

• Right to access your data: you have the right to access your data in order to know what personal data concerning you we are processing.  

• Right to request rectification or deletion of your data: you have the right to rectify any personal data concerning you that you consider inaccurate and which are processed by the Data Controller, and, in certain circumstances, to request the deletion of your data when, among other things, the data are no longer necessary for the purposes for which they were collected.  

• Right to request the limitation of the processing of your data: in certain circumstances, you have the right to ask us to limit the processing of your data, in which case we inform you that we will only retain the data for which you have requested limitation of processing for the exercise or defence of claims.  

• Right to the portability of your data: in certain circumstances, you have the right to receive the personal data concerning you that you have provided to us, in a structured, commonly used and machine-readable format and to have it transferred by the Data Controller to another data controller.  

• Right to oppose the processing of your data: in certain circumstances and for reasons related to your particular situation, you have the right to oppose the processing of your data, in which case, we will stop processing it unless we have to continue to do so for compelling legitimate reasons or for the exercise or defence of possible claims. We also remind you that you have the right to oppose the processing of your data for advertising or promotional purposes.  

• Right to withdraw any of the consents you may have given for the processing of your data, without this affecting the lawfulness of the processing based on the consent prior to its withdrawal.  

The Data Controller informs you that you may exercise your rights over your personal data by either of the following means:  

• By completing our Rights Exercise Request Form.  

• By writing to Fundación Universitaria San Pablo - CEU. Calle Tutor, 35, 5ª planta (28008) Madrid (Spain), including the reference "Data Protection".  

In both cases, you may be required to prove your identity as the person requesting the exercise of rights by sending a copy of your ID card, NIE, Passport or equivalent document, in the event that there is any doubt as to the identity of the person requesting it and, in particular, if they are exercised through voluntary or legal representation. The Data Controller shall provide the information requested within a maximum period of one month from receipt of the request. This period may be extended by a further two months if necessary, taking into account the complexity and number of requests.  

The Controller does hereby inform you that you may file a complaint, in the case of the Fundación Universitaria San Pablo-CEU, with the Spanish Data Protection Agency, in the case of the Fundació Privada Universitat Abat Oliba CEU, with the Catalan Data Protection Authority, and in the case of the Fundación Universitaria Fernando III el Santo, with the Transparency and Data Protection Council of Andalusia. However, as a first recourse, a complaint may be filed with the Data Protection Officer, who will rule on the complaint within a maximum period of two months.

Finally, in accordance with our selection policy and quality system, we inform you that you have at your disposal a means of communication through which you can send us any comments you wish to make in relation to the selection processes, by e-mail to the following address:  [email protected]